System and method for provisioning device certificates

A method for provisioning a device certificate on a device configurable to communicate wirelessly with one or more backend servers via a communication network including a server, the method comprising the steps of:

• obtaining at the server an activation request for activating the device on the communication network;
• during activation of the device, receiving at the server, from the device, a device certificate request for the device, the device certificate request including at least a user identifier and a device identifier;
• and
• providing to the device, from the server, a device certificate that comprises a signed version of the device certificate request, the signed version of the device certificate request having been generated using a private key of a predefined certification authority, wherein the device certificate binds together the user identifier and the device identifier.

A wireless communication device configured:

• to transmit to a server of a communication network an activation request for activating the device on the communication network;
• during activation of the device, to transmit, from the device to the server, a device certificate request for the device, the device certificate request including at least a user identifier and a device identifier;
• and
• to receive at the device, from the server, a device certificate that comprises a signed version of the device certificate request, the signed version of the device certificate request having been generated using a private key of a predefined certification authority, wherein the device certificate binds together the user identifier and the device identifier.

A computer program product for provisioning a device certificate on a device configurable to communicate wirelessly with one or more backend servers via a communication network, the computer program product comprising instructions which, when executed on the device, cause the device to implement the steps of:

• transmitting to a server of the communication network an activation request for activating the device on the communication network;
• during activation of the device, providing, from the device to the server, a device certificate request for the device, the device certificate request including at least a user identifier and a device identifier;
• and
• receiving at the device, from the server, a device certificate that comprises a signed version of the device certificate request, the signed version of the device certificate request having been generated using a private key of a predefined certification authority, wherein the device certificate binds together the user identifier and the device identifier.